$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/5039e35f-77a6-3bcb-9e80-9581d5115cbe.roa File: 5039e35f-77a6-3bcb-9e80-9581d5115cbe.roa (raw, json) Hash identifier: EWQ7rQvGECiVswq2+kGGgqOFeXkdkA5AMX8bsxVYzYE= Subject key identifier: D2:01:C5:56:22:DB:2B:7E:DA:9A:9C:B4:F4:57:F3:56:7B:B3:5D:4A Certificate issuer: /CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2 Certificate serial: 010D0C9F43285849BF3F6028DE8FB37FA63092C0 Authority key identifier: 52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/5039e35f-77a6-3bcb-9e80-9581d5115cbe.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 6538 IP address blocks: 2607:cd80::/28 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:60:28:de:8f:b3:7f:a6:30:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=1d9334e0-0fb1-405b-a0d5-d92f301859fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:6e:be:e0:f6:0e:6a:fa:37:df:ac:f4:53: 2f:9c:b1:8d:4f:e7:73:57:72:49:66:85:15:34:50: 12:23:ab:11:fa:ec:17:08:c5:6f:24:61:6a:f5:14: 05:ef:14:e6:2b:e1:ea:bc:04:79:92:03:07:7f:d9: c7:21:f5:75:53:8f:35:e5:0c:6b:0e:3e:f4:bb:f4: 8b:a5:b8:16:d8:7f:b4:bb:2e:cb:bf:a6:ac:9e:4f: b7:49:e4:de:ef:eb:8f:fd:94:1c:28:f1:e4:8d:f4: 83:99:89:06:ba:64:8f:5f:84:f9:c1:9f:79:b7:b5: 06:1f:3c:70:02:2b:ec:59:53:8b:cd:5c:f8:c8:e1: 1b:85:11:e1:96:f2:73:7b:dc:16:13:db:62:21:40: b5:34:c4:44:ca:70:36:fc:69:9b:d3:31:bc:93:1e: 4c:3c:4f:46:49:16:33:27:93:97:52:2f:6b:a6:46: c8:62:48:71:b5:b7:47:4a:ad:17:24:78:39:86:4a: 38:5b:92:37:51:1d:93:3f:4d:2e:8f:e4:c9:91:b0: 2d:49:4d:64:5c:9f:73:8f:05:68:c4:66:a7:a4:bf: 4f:26:0b:31:bf:77:07:a3:f7:1e:f6:d2:8d:ba:17: 53:7c:55:9f:40:b3:20:05:72:28:74:df:79:7f:37: 69:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:01:C5:56:22:DB:2B:7E:DA:9A:9C:B4:F4:57:F3:56:7B:B3:5D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/5039e35f-77a6-3bcb-9e80-9581d5115cbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl X509v3 Authority Key Identifier: keyid:52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer sbgp-ipAddrBlock: critical IPv6: 2607:cd80::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b4:de:d2:e6:c9:19:fb:62:33:8f:c0:dd:dd:ed:0a:a2:71: 9f:6b:9f:be:f8:38:5c:e9:de:4b:e7:5e:87:c4:49:92:1d:1d: 6a:d8:58:a3:c2:9c:0d:2b:0b:1d:e2:ba:42:3a:89:97:18:46: e1:3d:f6:3f:5e:0f:49:67:e7:8f:81:7f:39:97:d2:10:6b:8f: 54:19:ea:4f:d6:07:27:d9:0d:19:cd:f9:7b:dd:c4:57:3e:81: 27:0f:91:14:37:05:73:2a:11:40:d4:1f:f0:bd:94:16:07:57: 0d:cb:01:5d:4b:cb:e3:a4:2e:6d:53:78:85:a6:9f:34:f0:86: 37:d7:d1:a4:09:e8:7e:c6:0a:61:1c:28:5e:ed:73:c2:8a:16: e1:83:e4:d0:8a:44:e3:d2:b5:8c:2a:1b:5d:d3:d6:a5:e4:57: 47:1e:9b:f8:ae:58:9c:c2:1e:1d:dd:17:c9:b1:eb:ac:42:91: b7:c2:f9:ba:10:9b:2e:aa:4c:08:21:16:e2:fa:c9:b5:78:90: 44:b9:69:22:8b:69:b2:42:ab:f3:b6:eb:1a:20:ce:f7:32:c7: cd:4a:36:e2:14:54:97:3d:8e:c8:1e:24:3a:ae:5e:7b:59:b9: 3a:16:07:1f:38:86:60:f9:b5:9a:91:2e:f4:58:6b:f0:41:67: 4e:5d:f3:a5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEm/P2Ao3o+zf6YwksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThlY2NhNmUtZTRhZi00YTU2LTg5MWQtYzJlMzA1MWEx YmMyMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MWQ5MzM0ZTAtMGZiMS00MDViLWEwZDUtZDkyZjMwMTg1OWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqBuvuD2Dmr6N9+s9FMvnLGNT+dzV3JJZoUV NFASI6sR+uwXCMVvJGFq9RQF7xTmK+HqvAR5kgMHf9nHIfV1U4815QxrDj70u/SL pbgW2H+0uy7Lv6asnk+3SeTe7+uP/ZQcKPHkjfSDmYkGumSPX4T5wZ95t7UGHzxw AivsWVOLzVz4yOEbhRHhlvJze9wWE9tiIUC1NMREynA2/Gmb0zG8kx5MPE9GSRYz J5OXUi9rpkbIYkhxtbdHSq0XJHg5hko4W5I3UR2TP00uj+TJkbAtSU1kXJ9zjwVo xGanpL9PJgsxv3cHo/ce9tKNuhdTfFWfQLMgBXIodN95fzdpdwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNIBxVYi2yt+2pqctPRX81Z7s11KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OGVj Y2E2ZS1lNGFmLTRhNTYtODkxZC1jMmUzMDUxYTFiYzIvNTAzOWUzNWYtNzdhNi0z YmNiLTllODAtOTU4MWQ1MTE1Y2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNThlY2NhNmUtZTRhZi00YTU2LTg5 MWQtYzJlMzA1MWExYmMyLzU4ZWNjYTZlLWU0YWYtNGE1Ni04OTFkLWMyZTMwNTFh MWJjMi5jcmwwHwYDVR0jBBgwFoAUUuGuIUtwcT5isDYp+pRXmy2QESwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OGVjY2E2ZS1lNGFmLTRhNTYtODkxZC1jMmUz MDUxYTFiYzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgfNgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCHtN7S5skZ+2Izj8Dd3e0KonGfa5+++Dhc6d5L516HxEmSHR1q2Fij wpwNKwsd4rpCOomXGEbhPfY/Xg9JZ+ePgX85l9IQa49UGepP1gcn2Q0Zzfl73cRX PoEnD5EUNwVzKhFA1B/wvZQWB1cNywFdS8vjpC5tU3iFpp808IY319GkCeh+xgph HChe7XPCihbhg+TQikTj0rWMKhtd09al5FdHHpv4rlicwh4d3RfJseusQpG3wvm6 EJsuqkwIIRbi+sm1eJBEuWkii2myQqvztusaIM73MsfNSjbiFFSXPY7IHiQ6rl57 Wbk6FgcfOIZg+bWakS70WGvwQWdOXfOl -----END CERTIFICATE-----Generated at Mon May 12 05:31:42 2025 by rpki-client